Overview

overview

10

Static

static

1

2024-02-17...ia.exe

windows7-x64

10

2024-02-17...ia.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-17_d5cdd366da8ff7b7dcda895273f7aad4_mafia

  • Size

    1.9MB

  • Sample

    240217-mvqh8adh61

  • MD5

    d5cdd366da8ff7b7dcda895273f7aad4

  • SHA1

    24607364390995311078195f3c294c5eb849d650

  • SHA256

    4864b090370fa294424ee677b31d5f938de11e28601159967b905d447b480cfd

  • SHA512

    390a2749a7f9c2f9d252718619aaaccede5b0d06f7b3d792427a8abdd5b7303a43ef73af9bf3883f867d1403c1ec1801859c9ca9eccfd6403f640f3b78b04e5c

  • SSDEEP

    49152:TOBaLa0w/ZMlSbB9K/TTfZAKRiWsMw0eoaR3joQBTy:TOBaLa0wRQSbgiK0udaRDBTy

Score
10/10
banloaddownloaderdropperevasiontrojan

Malware Config

Targets

    • Target

      2024-02-17_d5cdd366da8ff7b7dcda895273f7aad4_mafia

    • Size

      1.9MB

    • MD5

      d5cdd366da8ff7b7dcda895273f7aad4

    • SHA1

      24607364390995311078195f3c294c5eb849d650

    • SHA256

      4864b090370fa294424ee677b31d5f938de11e28601159967b905d447b480cfd

    • SHA512

      390a2749a7f9c2f9d252718619aaaccede5b0d06f7b3d792427a8abdd5b7303a43ef73af9bf3883f867d1403c1ec1801859c9ca9eccfd6403f640f3b78b04e5c

    • SSDEEP

      49152:TOBaLa0w/ZMlSbB9K/TTfZAKRiWsMw0eoaR3joQBTy:TOBaLa0wRQSbgiK0udaRDBTy

    Score
    10/10
    banloaddownloaderdropperevasiontrojan

    • Banload

      Banload variants download malicious files, then install and execute the files.

      trojandropperdownloaderbanload

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks